I had an attack that kept the Malware after a factory reset, and I contacted Lenovo about it. They confirmed it was indeed still intact.

We even did a low-level reset (a representative guided me through it) but to his own surprise the malware was still there.

I was out of warranty and I had to pay a sum to get it fixed, which was more expensive than buying a new tablet.

At the very least, yes. But I read something from a former NSA hacker once and he mentioned he replaces his computer and phone every quarter, in addition to a bunch of other paranoid things.

I'm not that extreme, but I did replace my computer once I got back from Kiev. I'd rather not worry about it.